Important: Red Hat Security Advisory: scsi-target-utils security update

An updated scsi-target-utils package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2010-2221

Multiple buffer overflows in the iSNS implementation in isns.c in 1 Linux SCSI target framework aka tgt or scsi-target-utils before 1.0.6, 2 iSCSI Enterprise Target aka iscsitarget or IET 1.4.20.1 and earlier, and 3 Generic SCSI Target Subsystem for Linux aka SCST or iscsi-scst 1.0.1.1 and earlie...

scsi-target-utils security update

0.0-6.20091205snap.3 - Fix buffer overflow in isns scn handling CVE-2010-2221...

Multiple iSCSI implementations security vulnerabilities

Buffer overflow on iSNS message parsing...

Debian Security Advisory DSA 2042-1 (iscsitarget)

The remote host is missing an update to iscsitarget announced via advisory DSA 2042-1. OpenVAS Vulnerability Test $Id: deb20421.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2042-1 iscsitarget Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

[SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------------- Debian Security Advisory DSA-2042-1 [email protected] http://www.debian.org/security/ Luciano Bello May 5th, 2010 http://www.debian.org/security/faq -...

Linux iSCSI DoS

ietd daemon DoS via iSNS request...

Important: Red Hat Security Advisory: scsi-target-utils security update

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2001-0162

WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

CVE-2004-0641

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

CVE-2004-0641

The CVE-2004-0641 issue affects Thomson SpeedTouch 510 ADSL Router (firmware GV8BAA3.270, and possibly earlier). The vulnerability arises from a predictable TCP Initial Sequence Number (ISN) generator, enabling remote attackers to spoof or hijack TCP connections. Exploitation details are describe...

Ethereal fails to properly handle malformed iSNS packets

Overview Ethereal contains a vulnerability in the way it processes Internet Storage Name Service iSNS packets. Description The Internet Storage Name Service iSNS protocol is used to automate the discovery, management, and configuration of iSCSI and Fibre Channel devices in an IP network. Ethereal...

Ethereal 0.x - Multiple iSNS SMB SNMP Protocol Dissector Vulnerabilities

Ethereal 0.x - Multiple iSNS SMB SNMP Protocol Dissector Vulnerabilities // source: https://www.securityfocus.com/bid/10672/info Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a...

Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities

// source: https://www.securityfocus.com/bid/10672/info Ethereal 0.10.5 has been released to address multiple vulnerabilities, including an iSNS protocol dissector vulnerability, a SMB protocol dissector vulnerability, and a SNMP protocol dissector vulnerability. These issues are due to a failure...

Fedora Core 2 : ethereal-0.10.5-0.2.1 (2004-220)

Issues have been discovered in the following protocol dissectors : - The iSNS dissector could make Ethereal abort in some cases. 0.10.3 - 0.10.4 CVE-2004-0633 - SMB SID snooping could crash if there was no policy name for a handle. 0.9.15 - 0.10.4 CVE-2004-0634 - The SNMP dissector could crash du...

CVE-2004-0633

The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service process abort via an integer overflow...

CVE-2004-0633

The CVE-2004-0633 issue affects Ethereal’s iSNS dissector (versions 0.10.3–0.10.4). A remote, unauthenticated attacker could cause a crash or potentially execute code by sending malformed iSNS packets, per included reports. Impact is a denial of service (partial availability) and possible code ex...

PT-2004-1725 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.3 through 0.10.4 Description: The issue allows remote attackers to cause a denial of service, resulting in a process abort, via an integer overflow in the iSNS dissector. Recommendations: For Ethereal versions 0.10.3...

CVE-2001-0288

CVE-2001-0288 pertains to Cisco IOS devices (notably switches/routers running IOS 12.1 and earlier) where TCP Initial Sequence Numbers (ISNs) are predictable. The ISN predictability enables remote attackers to spoof or hijack TCP connections, with impact described as partial confidentiality, inte...

PT-2010-5656 · Linux +1 · Iscsitarget +1

Name of the Vulnerable Software and Affected Versions: iscsitarget versions prior to 1.4.19 iscsitarget versions 0.4.16 and earlier Linux SCSI target framework versions 1.0.3, 0.9.5, and earlier Description: The issue involves multiple vulnerabilities in the iscsitarget package that can lead to a...